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IN THE CLAIMS! 

L (Currently aniiended) An authentication method comprising the steps of: 
generating a first security context in respond to a first user authentication; 
generating a second seeuiity context in response to a second user authentication, wherein 
said second security context aggregates is an agprepate of said first security context and a 
security context cotresponding to an identity in said second user authentication. 

2. (Original) The method of claim 1 further comprising the step of saving said first security 
context. 

3. (Original) The method of claim 2 wherein said step of saving said first security context 
con^rises the step of pushing said first security context on a stack. 

4. (Original) The method of claim 1 further comprising the step of receiving a user logoff. 

5. (Original) The method of claim 4 further comprising the step of destroymg said second 
security context in response to said step of receiving said user logoff. 

6. (Currently amended) The method of claim 2 further comprising the step of revertirig to 
said first security context in response to a user lorof f. wherein said first securitv context is then 
used to access security protected resources bv a user who issued the user lopoff . 

7. (Original) The method of claim 6 wherein said step of reverting to said first security 
context comprises the step of popping said first security context off of a stack. 

8. (Original) The method of claim 1 further comprising the step of determining an access 
permission in response to said second security context. 
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9. (Ciirrenfly amended) A computer program product embodied in a tangible storage 
medium, the program product comprising a program of instructions for performing the method 
steps of: 

generating a first security context in response to a first user authentication; 

generating a second scauity context in response to a second user authentication, wherdn 
said second security comcxt aggrogotop is an aggregate of said first security context and a 
security context conesponding to an identity in said second user authentication. 

10. (Original) The program product of claim 9 further comprising instructions for 
performing the step of saving said first security context. 

1 1. (Original) The program product of claim 10 wherein said step of saving said first security 
context comprises the step of pushing said first security ccmtext on a stack, 

12. (Original) The program product of claim 9 further comprising instructions for 
performing the step of receiving a user logoff. 

13. (Original) The program product of claim 12 further comprising instructions for 
performixig the step of destroying said second security context in response to said step of 
receiving said user logoff. 

14» (Currently amended) The program product of claim 10 further comprising instructions 
for performing the step of reverting to said first security context in response to a user logoff^ 
wherein said first security context is Aen used tn aoocss security protected resources bv a user 
who issued the user logoff. 

15. (Original) The program product of claim 14 wherein said step of revciting to said first 
security context comprises the step of popping said first security context off of a stack. 
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16. (Qrigmal) The program product of claim 9 further comprising instructions for 
performing the step of determining an access permission in response to said second security 
conte^a. 

17. (Currently amended) A data processing system comprising; 

circuitry operable for genemting a first security context in response to a first user 
authentication; 

circuitry operable for generating a second security contcM in response to a second user 
authentication, wherein said second security context flggregat ea is an agisrepate of said first 
security context and a security context corresponding to an identity in said second user 
authentication. 

18. (Origmal) The system of claim 17 further comprising circuitry operable for saving said 
first security context. 

19. (Original) The system of claim IS wherein said circuitry operable for saving said first 
security context comprises the step of pushing said first security context on a stack. 

20. (Original) The system of daim 17 further comprising circuitry operable for receiving a 
user logoff. 

21. (Original) Hie system of claim 20 further comprising circuitry operable for destroying 
said second security context in response to said step of receiving said user logoff. 

22. (Currently amended) Tlie system of claim 18 further comprising circuitry operable for 
reverting to said first security context in response to a user loj[of f. wherein said first security 
context is then used to access security protected resources bv a user who issued the user logoff . 

23. (Original) The system of claim 22 wherein said circuitry operable for reverting to said 
first security context comprises circuitry operable for popping said first security context off of a 
stack. 
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24, (Original) The system of daim 17 farther comprising circuitry operable for determining 
an access permission in response to said second security context 
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